Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Joomla Extension - yootheme.com - Authenticated, privileged SQL injection in YOOtheme Pro 1.0.0-5.0.40 - An SQL injection allowed any contributor-level user to inject own content into SQL queries.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
🚨 Critical security update for YOOtheme We fixed 2 vulnerabilities: CVE-2026-75115: Arbitrary file read (contributor-level) CVE-2026-76613: SQL injection (contributor-level) Update YOOtheme immediately to 5.0.41 if untrusted users have permission to create articles.
Post summary
The message announces a patch for two CVEs in YOOtheme, providing technical details and urging an immediate update to version 5.0.41.
CVE-2026-76613 Authenticated SQL Injection in YOOtheme Pro 1.0.0-5.0.40 Enables Content Injection https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-76613
Post summary
The message announces an authenticated SQL injection in YOOtheme Pro versions 1.0.0‑5.0.40 that permits content injection, but it provides no PoC, exploit, or patch information.